CVE-2017-2166

Published: Jan 26, 2018Modified: Nov 21, 2024

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Open redirect vulnerability in GroupSession version 4.7.0 and earlier allows an attacker to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Affected (1)

Products: Groupsession: Groupsession

Groupsession

1 product

Groupsession

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Groupsession Groupsession	Up to 4.7.0

Related CWEs

CWE-601

URL Redirection to Untrusted Site ('Open Redirect')

A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.

References (2)

https://jvn.jp/en/jp/JVN26200083/index.html

Source: vultures@jpcert.or.jp

Third Party AdvisoryVDB Entry

https://jvn.jp/en/jp/JVN26200083/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.